> -----Original Message----- > From: Matt Schillinger [mailto:mschilli@vss.fsi.com]> On your firewall, forward all http traffic NOT sourced from your proxy > server, back to your proxy server. Then all your clients will > be forced > through the proxy.Or just block port 80 (and whatever other web ports you're concerned about) outgoing from everything except the proxy. That's what we do on our office LAN.